rocheston/zelc repository overview

⁠⚡ ZelC — The Cybersecurity Programming Language

Version 1.2 (Maple) | Rocheston Proprietary

ZelC is a cybersecurity-native programming language built for Security Operations, Compliance, Evidence-Based Response, and AI-Driven Defense. Invented by Haja Mo at Rocheston.

Built with 💛 by Haja Mo.

⁠Quick Start

# Run a ZelC playbook
docker run --rm -v "$PWD":/playbooks rocheston/zelc run /playbooks/my_playbook.zelc

# Launch interactive REPL
docker run --rm -it rocheston/zelc

# Safety analysis
docker run --rm -v "$PWD":/playbooks rocheston/zelc guard /playbooks/my_playbook.zelc

# Format ZelC source
docker run --rm -v "$PWD":/playbooks rocheston/zelc fmt /playbooks/my_playbook.zelc

⁠Launch ZelC Playground (Web IDE)

docker run --rm -p 8080:8080 rocheston/zelc playground
# Open http://localhost:8080

⁠Launch Zelfire SOC Daemon

docker run --rm -p 9090:9090 rocheston/zelc daemon

⁠Docker Compose (Full Stack)

version: "3.8"
services:
  zelc-playground:
    image: rocheston/zelc:1.2
    command: playground
    ports:
      - "8080:8080"

  zelc-daemon:
    image: rocheston/zelc:1.2
    command: daemon
    ports:
      - "9090:9090"

  rosecoin-dev:
    image: rocheston/zelc:1.2
    command: rosecoin-dev
    ports:
      - "9333:9333"

docker-compose up -d

⁠All CLI Commands

⁠Example Playbook

-- Brute Force Detection and Response

check BruteForceShield
  keep threshold = 12
  keep block_duration = 2 hours

  when bruteforce_login
    alert critical message "Brute force attack detected"

    do
      firewall block ip event.source_ip for block_duration
      iam lock user event.username

      notify slack channel "#soc" message "Brute force blocked"

      evidence record "brute-force-containment" details {
        attacker_ip: event.source_ip,
        target_user: event.username,
        actions_taken: ["ip_blocked", "user_locked"]
      }

      rosecoin anchor evidence_pack "brute-force"
    end
  end
end

⁠What Makes ZelC Different

• Kinetic Safety — Destructive actions (block, isolate, revoke, kill) only execute inside do...end blocks. Read-only by default.
• Evidence-as-a-Primitive — Every action produces immutable audit records with SHA-256 hashes and blockchain anchoring.
• Intent Validation — Physics Constraint Engine prevents AI agents from causing catastrophic damage by simulating blast radius at compile time.
• Taint Tracking — Untrusted input is tracked through the data flow. No accidental injection paths.
• SOC-Native Types — IP, CIDR, Hash, UserId, IOCSet, Incident, Timeline, EvidencePack, RiskScore, ControlId.
• Multi-Cloud — Native commands for AWS, Azure, GCP, Docker, Kubernetes, and 20+ security platforms.
• AI-Ready — Built for AINA agentic workflows with speakable syntax and capability-gated execution.
• Blockchain Proof — Rosecoin integration for cryptographic evidence anchoring.
• Compliance Mapping — Automatic mapping to NIST, SOC2, ISO 27001, HIPAA, PCI-DSS, GDPR.
• Emoji Visual Mode — Optional visual syntax with semantic icons for 3AM incident clarity.

⁠Tags

• rocheston/zelc:latest — Latest release
• rocheston/zelc:1.2 — Version 1.2 (Maple)

⁠Links

• Website: https://rocheston.com/zelc⁠
• GitHub: https://github.com/rocheston/zelc⁠
• Downloads: https://rocheston.com/zelc/zelc-releases⁠
• Rocheston: https://rocheston.com⁠

⁠License

Rocheston Proprietary. All rights reserved.

© 2026 Rocheston.

Built with 💛 by Haja Mo.